Skip to content
Threat Feed
Subscribe

Tag

Heap-Corruption

1 brief RSS
high advisory

CVE-2026-66032 - libssh2 SFTP Double-Free Vulnerability

A double-free vulnerability, CVE-2026-66032, in libssh2 versions through 1.11.1 allows a malicious SSH server to corrupt the heap of an authenticated client opening an SFTP session, potentially leading to arbitrary code execution.

libssh2 <= 1.11.1 ssh sftp double-free vulnerability libssh2 memory-corruption rce DoS +2
4t 4c